[PATCH] wpa_supplicant: Cache PMK for 802.1X 4-way handshake offload

[Chung-Hsien Hsu]

On Mon, Jul 27, 2026 at 11:08:05AM +0200, Jouni Malinen wrote:
> Could you please clarify why this is needed, i.e., whether this is
> fixing an issue (and if so, what kind of issue) or this is just to keep
> things more consistent or prepared for potential future changes?

This fixes a functional issue.

With IEEE 802.1X 4-way handshake offload, the normal host-side EAPOL-Key
processing path is bypassed, so the PMK is not stored in the WPA state
machine and no PMKSA cache entry is created.

As a result, a subsequent connection cannot use PMKSA caching and may
require a full EAP authentication again. This change stores the PMK and
creates the PMKSA cache entry for the applicable non-FT and non-Suite-B
RSN cases.

Chung-Hsien